Privacy Policy

1. Who we are

We're the controller responsible for your data — that means we decide why and how it's handled. That's Cats on Acid UG (haftungsbeschränkt) i.G., Kolonnenstr. 8, 10827 Berlin, Germany, contact contact@catsonacid.dev. We haven't appointed a data protection officer — we're not required to.

2. What this page covers

Only this website, catsonacid.dev. Our app, Gibber, is a completely separate thing with its own policy — if you're looking for how the app handles your account, photos or location, read the Gibber privacy policy instead. Nothing on this page applies to the app, and nothing in that policy applies to this website.

3. What we actually handle

Server logs. Our hosting provider, Vercel, automatically records each request to the site: your IP address, the time, which page you asked for, and what browser you're using. This happens for every website on the internet — it's how a server knows where to send the page back — and we can't switch it off. We use it only to keep the site running and to investigate problems. Basis: Art. 6(1)(f) GDPR (our legitimate interest in a working, secure website). These logs are kept for one hour and then deleted automatically — so by the time you read this, your visit has almost certainly already been forgotten.

Emails you send us. If you write to contact@catsonacid.dev, we have your address and whatever you put in the message, for as long as we need it to deal with what you asked about. Basis: Art. 6(1)(f) GDPR (answering people who contact us), or Art. 6(1)(b) if you're writing about a contract with us.

That's the complete list. There's no account to create, no form to fill in, and nothing to sign up for.

4. What we don't do

We think it's worth being specific, because "we value your privacy" is usually where a policy starts being vague:

• No cookies. The site sets none at all, which is why you never saw a cookie banner.
• No analytics, no tracking pixels, no advertising.
• No third-party requests. Every image, sound and style loads from our own domain, so no one else learns you visited.
• No web fonts. The page uses whatever font your device already has.
• No profiling and no automated decision-making.

5. Where the data goes

Vercel Inc. is a US company, so the logs described above are handled partly outside the EU. Vercel's Data Processing Addendum applies to us automatically as their customer, and it covers the transfer using the European Commission's Standard Contractual Clauses — the standard legal safeguard for sending data outside the EU, under Chapter V GDPR. We don't share this data with anyone else, and we don't sell it — there'd be nothing to sell.

6. Your rights

You can ask us for a copy of what we hold about you, ask us to correct or delete it, ask us to restrict how we use it, or object to us using it at all. Email contact@catsonacid.dev and we'll handle it.

In practice there's usually very little to hand over: log entries are keyed to an IP address, not to a name, so unless you can tell us exactly when you visited, we often can't tell which entries are yours — and GDPR doesn't require us to collect extra data about you just to be able to identify you (Art. 11).

If you think we've got this wrong, you can complain to a data protection authority. For Berlin that's the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, mailbox@datenschutz-berlin.de, datenschutz-berlin.de.

7. Changes to this page

If the site ever gains anything that touches your data, we'll update this page before that ships, not after.

8. Contact

Cats on Acid UG (haftungsbeschränkt) i.G. · Kolonnenstr. 8, 10827 Berlin, Germany · contact@catsonacid.dev

Last updated: 29 August 2026 · Version 1.0 · Impressum